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IN THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application. 
1-41. (Canceled) 

42. (Currently Amended) Computer-implementable instnjction code operable on 
a user device for constructing and transmitting a password to an authentication device that 
authenticates the password and grants the user device access to protected information, 
said instruction code being operable for 

receiving through an Input device from a user, a sequence of predefined characters 
to be utilized to construct the password; 

ploc i ng the roco i ved charact e rs i n at l eas t two data packets, w i thout r e gard to any 
tim i ng ohorooter i st i cs w i th wh i ch th e charact eps- w e r e r eceivedy 

retrieving from a memory, a time interval mutually agreed upon by the user device 
and the authentication device; and 

individually transmitting the data pack e t s characters to the authentication device 
separated in time by the mutually agreed upon time interval , and without regard to anv 
timing characteristics with which the characters were received from the user . 

43. (Currently Amended) In a user device, a computer-implemented method of 
constnjcting and transmitting a password to an authentication device that authenticates the 
password and grants the user device access to protected information, said method 
comprising; 

receiving through an input device from a user, a sequence of predefined characters 
to be utilized to construct the password; 

placing th e r e c e iv e d charact e rs in at l ea st two dat a p a ck e ts i 
retrieving from a memory, a predefined time Interval; and 
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individually transmitting the data pack e ts characters to the authentication device 
separated in time by the predefined time interval. 

44. (Currently Amended) The method of claim 43. \Arfierein the password includes 
at least three data packets characters , and wherein the step of retrieving a predefined time 
interval includes retrieving a first predefined time interval for separating a first pair of 
adjacent dat a o a ck e ts characters and retrieving a different second predefined time interval 
for separating a second pair of adjacent data pack e t s characters . 

45. (Previously Presented) The method of claim 43, further comprising, before 
the retrieving step, the steps of: 

receiving at least one predefined time interval from the authentication device; and 
storing the at least one predefined time interval in the memory. 

46. (Canceled) 

47. (Currently Amended) In an authentication device, a computer-implemented 
method of authenticating a user device requesting access to protected Information through 
the authentication device, said method comprising: 

receiving at least two individually transmitted data pack e ts password characters 
from the user device; 

measuring a time of receipt for each received data pack e t password character to 
determine a received time interval separating each data pack e t password character from 
an adjacent data pack e t password character received from the user device; 

determining by the authentication device, whether the received time interval 
separating each data pack e t password character from an adjacent data - packot password 
character matches tiro a predefined time interval; 

e xtr a ct i ng charactorc from the rec ei v e d data pack e ts; 
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determining by the authentication device, whether the extraotod received password 
characters match the a sequence of predefined characters; and 

positively authenticating the user device only if the received time interval separating 
each data packet password character from an adjacent dat a- pack e t password character 
matches the predefined time interval, and the extraotod received password characters 
match the sequence of predefined characters. 

48. (Cun^ently Amended) A method of transmitting a computer password having a 
plurality of characters, comprising: 

placing th e plura li ty of charact e r s i n at l eas t two data pack e ts; 

obtaining at least one predefined time interval for defining [[an]] individual 
transmission time times for transmitting oach dato packot at least two password characters 
from a user device to an authentication device; and 

individually transmitting the at least two data packets password characters from the 
user device to the authentication device at the individual transmission times for each data 
paeket password character 

wherein a valid password must eaffv include the correct password characters 4ft4h6 
data pack e ts , and the data pack e t s password characters must be received by the 
authentication device with the correct time interval between sequential data packets 
password characters . 

49. (Canceled) 
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50, (Currently Amended) A computer-implemented method of authenticating a 
user device requesting access to protected information through an authentication device, 
said method comprising: 

in the user device: 

receiving through an input device from a user, a sequence of predefined 
characters to be utilized to construct the password; 

plac i ng tho receiv e d charact e rs i n at l e ast two data p a ck e ts; 

retrieving from a memory, a predefined time interval; and 

individually transmitting the data packets password characters to the 
authentication device separated in time by the predefined time Interval; and 
in the authentication device: 

receiving the individually transmitted data pack e t s password characters from 
the user device; 

measuring a time of receipt for each received data pack e t password 
character to determine a received time interval separating each data pack e t password 
character from an adjacent data packet password character in the password; 

determining by the authentication device, whether the received time interval 
separating each data packot password character from an adjacent data packot password 
character matches the predefined time interval; 

oxtract i ng tho charactors from tho roceiv e d data packets; 

determining by the authentication device, whether the oxtraotod received 
password characters match the sequence of predefined characters; and 

positively authenticating the user device only if the received time interval 
separating each data packet password character from an adjacent data pack e t password 
character matches the predefined time interval, and the oxtracted received password 
characters match the sequence of predefined characters. 
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